Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %WINDIR%\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
Изменения в файловой системе:
Присваивает атрибут 'скрытый' для следующих файлов:
- %WINDIR%\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
Сетевая активность:
Подключается к:
- 'my##tz.com':80
TCP:
Запросы HTTP POST:
- my##tz.com/
UDP:
- DNS ASK wa####gtonpost.com
- DNS ASK my##tz.com
- DNS ASK hu##ng.com
- DNS ASK to#.com
Другое:
Ищет следующие окна:
- ClassName: '44278005' WindowName: '534559435'
- ClassName: '628178984' WindowName: '1703879370'
- ClassName: '1444970449' WindowName: '2132461337'
- ClassName: '2057661147' WindowName: '1731495499'
- ClassName: '791529080' WindowName: '2113864282'
- ClassName: '1059623649' WindowName: '1318545001'
- ClassName: '228670744' WindowName: '409933181'
- ClassName: '449673068' WindowName: '452954401'
- ClassName: '345733778' WindowName: '2060512988'
- ClassName: '1311932847' WindowName: '593463922'
- ClassName: '550700160' WindowName: '511285893'
- ClassName: '1474495617' WindowName: '2111201420'
- ClassName: '34574824' WindowName: '1691204490'
- ClassName: '777084827' WindowName: '901712905'
- ClassName: '160234448' WindowName: '1210101524'
- ClassName: '486481718' WindowName: '1254602256'
- ClassName: '2030240426' WindowName: '1472674134'
- ClassName: '639053971' WindowName: '1478509283'
- ClassName: '365853492' WindowName: '1714928648'
- ClassName: '434418126' WindowName: '1872360200'
- ClassName: '1463999800' WindowName: '1680603167'
- ClassName: '802766152' WindowName: '555455594'
- ClassName: '153423169' WindowName: '1050347591'
- ClassName: '373526036' WindowName: '1496864870'
- ClassName: '670231200' WindowName: '1707186468'
- ClassName: '2081078007' WindowName: '207455960'
- ClassName: '994837910' WindowName: '1075181554'
- ClassName: '362473187' WindowName: '573837940'
- ClassName: '203080557' WindowName: '347769126'
- ClassName: '1364273497' WindowName: '179844802'
- ClassName: '1034189892' WindowName: '174964566'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '332009533' WindowName: '88230198'
- ClassName: '1923437174' WindowName: '1199044690'
- ClassName: '388559543' WindowName: '1723047319'
- ClassName: '385441687' WindowName: '1156136439'
- ClassName: '2099237986' WindowName: '372912623'
- ClassName: '636955817' WindowName: '1714128721'
- ClassName: '82439306' WindowName: '1859979444'
- ClassName: '674747636' WindowName: '1586051782'
- ClassName: '20714406' WindowName: '1367489600'
- ClassName: '702761421' WindowName: '1038771971'
- ClassName: '509314100' WindowName: '295495945'
- ClassName: '1510444948' WindowName: '1356522475'
- ClassName: '739781310' WindowName: '477564856'
- ClassName: '91283113' WindowName: '256884559'
- ClassName: '1789503466' WindowName: '725726617'
- ClassName: '1594739833' WindowName: '746841698'
- ClassName: '2067528779' WindowName: '480731006'
- ClassName: '966860947' WindowName: '1435349217'
- ClassName: '1350740925' WindowName: '1158649016'
- ClassName: '13847841' WindowName: '1895172521'
- ClassName: '634337393' WindowName: '1706205239'
- ClassName: '1402232755' WindowName: '1088335491'
- ClassName: '1800427208' WindowName: '127768559'
- ClassName: '1085787408' WindowName: '2044446036'
- ClassName: '587093954' WindowName: '642515148'
- ClassName: '253967829' WindowName: '373460270'
- ClassName: '320712608' WindowName: '858485285'
- ClassName: '458185573' WindowName: '2128437501'
- ClassName: '1281351442' WindowName: '25258337'
- ClassName: '1528742930' WindowName: '1565237342'
- ClassName: '1133608341' WindowName: '1934150637'
- ClassName: '617720879' WindowName: '844946157'
- ClassName: '849806738' WindowName: '1555473884'
- ClassName: '1773375310' WindowName: '417237131'
- ClassName: '720270344' WindowName: '784377386'
- ClassName: '1862736622' WindowName: '679675053'
- ClassName: '1144305245' WindowName: '704924120'
- ClassName: '1600998209' WindowName: '570458186'
- ClassName: '1455862974' WindowName: '1225803197'
- ClassName: '1786976412' WindowName: '1579987219'
- ClassName: '1178864129' WindowName: '1485929484'
- ClassName: '1105252805' WindowName: '2009232096'
- ClassName: '1384573292' WindowName: '1684735267'
- ClassName: '240575074' WindowName: '1065711599'
- ClassName: '462408361' WindowName: '1402903889'
- ClassName: '593192168' WindowName: '1075387532'
- ClassName: '858303129' WindowName: '411990783'
- ClassName: '251122582' WindowName: '1755905522'
- ClassName: '210740593' WindowName: '128500023'
- ClassName: '368724488' WindowName: '341317165'
- ClassName: '429149378' WindowName: '1905117644'
- ClassName: '1345420520' WindowName: '1219221135'
- ClassName: '927568089' WindowName: '1508916289'
- ClassName: '1220454330' WindowName: '1343074982'
- ClassName: '126395165' WindowName: '582395798'
- ClassName: '1006686827' WindowName: '132090393'
- ClassName: '521405066' WindowName: '1493940406'
- ClassName: '222188990' WindowName: '140633784'
- ClassName: '536338381' WindowName: '1571657477'
- ClassName: '1144003144' WindowName: '1087007087'
- ClassName: '233885090' WindowName: '1892666924'
- ClassName: '1642845422' WindowName: '652388013'
- ClassName: '1686076329' WindowName: '1603342929'
